Tony D’Addeo
@deodad
what I learned since asking: - MessageChannels introduce an additional state so implementing is more complicated than plain ole' postMessage - MessageChannel still need to be setup with a handshake over postMessage so you still need whatever origin checks you need there - subsequent communication is private which sounds nice but I don't have a good grasp on when this would come in handy practically. something like an XSS attack that is also subscribing to window message events and stealing that info but hard to reason about especially since the initial setup still requires postMessage
1 reply
0 recast
13 reactions
Tony D’Addeo
@deodad
claude saying it's still beneficial but still kinda vague for me
1 reply
0 recast
2 reactions
